CVE-2002-0301 Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters.
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix nfuse | = 1.6 | No fix listed |
References
- 20020220 Re: Citrix NFuse 1.6 - additional network exposure mailing-list
- 4142 vdb-entry